The Kerberos change-password service — on a Windows network, a domain controller sitting next to port 88.
Port 464 carries the Kerberos password change and set protocol: a client presents a ticket obtained from the KDC and submits a new password, over both UDP and TCP. RFC 3244 specifies the Microsoft variant that adds administrative set-password, which is what Active Directory uses. Every AD domain controller listens here, as do MIT krb5 and Heimdal KDCs configured with kadmind. Finding 464 open alongside 88, 389 and 445 is the standard signature of a domain controller.
Do not expose
A domain controller's password-change endpoint is a credential surface and part of the identity plane — it belongs on internal networks reachable only by domain members.
$ nmap -p 88,389,445,464 -sV TARGETSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.